The session setup to the Windows Domain Controller \\onprehp.testdomain.local for the doma.....

Resolution

NETLOGON is a function for communicating with a Windows domain controller. The Net Logon service establishes a secure channel and communicates with the domain controller. NetLogon service is a service that needs to be started on domain controllers, member servers, and PCs that participate in Windows AD.
If NETLOGON related service gives an error, there may be a problem with network route, secure channel, or directory replication.
If an error occurs in the NETLOGON service, you will not be able to log on to AD, you will not be able to authenticate, or directory replication will fail.

---



'

Netlogon Service is started.


Confirm "Netlogon" Service is started.



share


confirm NETLOGON and SYSVOL is shared


C:\>net share







NETLOGON     C:\Windows\SYSVOL\sysvol\testdomain.local\SCRIPTS

                                             Logon server share

SYSVOL       C:\Windows\SYSVOL\sysvol        Logon server share





Replication Status


Confirm directory replication status


C:\>repadmin /showrepl





USN Rollback


Confirm USN Rollback not occured.


C:\>repadmin /showrepl | findstr DSA


If following is show,staus is OK.
DSA option: IS_GC



Replicate to another Domain Controller




C:\>repadmin /syncal





C:\>repadmin /syncall /P





Confirm Domain Controller Status




C:\>dcdiag /v | findstr "error failure"





FSMO


Check fsmo.
C:\>netdom query fsmo



Domain Name resolution


Check if domain name is resolved by DNS.


C:\>nslookup





C:\>ping DomainNameHere.local





Domain Connection


Test Domain Controllor connection from client.



C:\>nltest /sc_verify:DomainNameHere.local





Domain Share


Test from client if domain share is correctry shown.



\\testdomain.local



If NETLOGON and SYSVOL is shown,staus is OK.



Group Policy


Check group policy is correctry configured.
C:\>gpresult /R


---

Post Comment